A fix is available
APAR status
Closed as program error.
Error description
Recreate of RACFVARS profile results in member lists being reversed. This is because RACF adds the members to the profile in reverse order with the ADDMEM operand of the RALTER command. When zSecure generates the RALTER ADDMEM commands to recreate the profile it takes the member names from the profile in the forward order. The order is only relevant for RACFVARS, and then only if you have a member that is a proper substring of another member.
Local fix
N/A
Problem summary
**************************************************************** * USERS AFFECTED: Users of zSecure Admin exploiting the * * "Recreate general resource profile" function * * ('R' action character against profile on the * * RA.R summary display) and/or the "Recreate * * general resource profile(s)" function * * (RA.4.9 option) in interactive mode to * * recreate profiles in the RACFVARS class. * **************************************************************** * PROBLEM DESCRIPTION: zSecure Admin generates incorrectly * * sorted sequence of the 'addmem' RACF * * commands that define members in a * * RACFVARS class profile. * **************************************************************** * RECOMMENDATION: Apply the PTF provided and review the * * documentation updates. * **************************************************************** When recreating a RACF profile in the RACFVARS class, zSecure Admin generated a sequence of the 'RALTER ... ADDMEM' commands for each profile member. However, the order of these commands is not correct, so that the recreated profile does not have the same order of members as the original profile.
Problem conclusion
zSecure Admin has been modified, so that it generates correct sequence of commands that define members in a RACFVARS profile being recreated. Please note the documentation changes as provided by the APAR tracking comment data.
Temporary fix
Comments
APAR Information
APAR number
OA64085
Reported component name
ZSEC BASE,ADMIN
Reported component ID
5655T0100
Reported release
250
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2022-12-08
Closed date
2023-01-20
Last modified date
2023-02-01
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Modules/Macros
CKRINMO CKROUNIT CKRPUTV CKRXCRE CKRXRRE GKRINMO GKROUNIT GKRPUTV
Fix information
Fixed component name
ZSEC BASE,ADMIN
Fixed component ID
5655T0100
Applicable component levels
R250 PSY UJ92031
UP23/01/21 P F301
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"250","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Document Information
Modified date:
01 February 2023